AU_USER_MASK(3BSM) Security and Auditing Library Functions AU_USER_MASK(3BSM)


NAME


au_user_mask - get user's binary preselection mask

SYNOPSIS


cc [ flag... ] file... -lbsm -lsocket -lnsl [ library... ]
#include <bsm/libbsm.h>

int au_user_mask(char *username, au_mask_t *mask_p);


DESCRIPTION


The au_user_mask() function reads the default, system wide audit classes,
combines them with the per-user audit classes, and updates the binary
preselection mask pointed to by mask_p with the combined value.


The audit preselection mask is constructed as follows:

success flags =
(system default success flags + per-user always success flags)
- per-user never success flags
failure flags =
(system default failure flags + per-user always failure flags)
- per-user never failure flags


The au_user_mask() function fails only if the system wide audit flags
could not be retrieved.

RETURN VALUES


Upon successful completion, au_user_mask() returns 0.


ATTRIBUTES


See attributes(7) for descriptions of the following attributes:


+--------------------+-----------------+
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+--------------------+-----------------+
|Interface Stability | Stable |
+--------------------+-----------------+
|MT-Level | MT-Safe |
+--------------------+-----------------+

SEE ALSO


login(1), getaudit(2), setaudit(2), au_preselect(3BSM), attributes(7)

NOTES


The au_user_mask() function should be called by programs like login(1)
which set a process's preselection mask with setaudit(2). getaudit(2)
should be used to obtain audit characteristics for the current process.


If global zone auditing is set, a local zone cannot reduce the default
flags.


March 6, 2017 AU_USER_MASK(3BSM)